We are trying to login our html mashup to Qlik Cloud using JWT auth.
We have already setup the JWT identity provider in the Qlik management console.
The JWT token is created using a php library and send for authorisation using the following code:
var config = {
host: 'qwxxxxxxxxxxxxxx.eu.qlikcloud.com',
prefix: '/',
port: 443,
isSecure: true,
webIntegrationId: 'xxxxxxxxxx', // from qlik management console
jwt: "eyJhb....UA", //token created using the php library
};
async function login() {
function isLoggedIn() {
console.log("checking logged in");
return fetch("https://" + config.host + "/api/v1/users/me", {
method: 'GET',
mode: 'cors',
credentials: 'include',
headers: {
'Content-Type': 'application/json',
'qlik-web-integration-id': config.webIntegrationId
},
}).then((response) => {
return (response.status === 200);
});
}
return isLoggedIn().then((loggedIn) => {
if (!loggedIn) {
console.log("not logged in");
return fetch("https://" + config.host + "/login/jwt-session", {
method: 'POST',
mode: 'cors',
credentials: 'include',
headers: {
'Content-Type': 'application/json',
'qlik-web-integration-id': config.webIntegrationId,
'Authorization': 'Bearer ' + config.jwt,
},
}).then((response) => {
if (response.status !== 200) {
console.log("failed logged in");
throw new Error('failed to login via jwt');
}
});
} else {
console.log("already logged in");
}
});
}
The response we get from the request is the following:
{
"errors": [
{
"title": "Authentication failed",
"detail": "No identity-provider is able to complete the exchange",
"code": "LOGIN-1",
"status": "401"
}
],
"traceId": "9cf4f041f5b6aa685eca85cce00075c3"
}
The JWT token is valid and properly decoded. We tested it by removing the "nbf" from the payload and the response mentioned that the nbf was missing.
Any thoughts what can be the problem?
Thanks in advance
